$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144977.roa File: AS144977.roa (raw, json) Hash identifier: xwblvcrenCHMsuVVQ8uX2teGwknjFeHkyAhlh/P/V7A= Subject key identifier: 92:E3:F5:58:89:94:51:64:70:22:9F:57:F1:2A:E3:42:8A:9A:BD:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5DC85A413E3CC43E6B40B0D75EC3A0EE8E3B9DF8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144977.roa Signing time: Wed 04 Mar 2026 06:21:17 +0000 ROA not before: Wed 04 Mar 2026 06:16:17 +0000 ROA not after: Wed 03 Mar 2027 06:21:17 +0000 asID: 144977 IP address blocks: 240a:a917::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c8:5a:41:3e:3c:c4:3e:6b:40:b0:d7:5e:c3:a0:ee:8e:3b:9d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:17 2026 GMT Not After : Mar 3 06:21:17 2027 GMT Subject: CN=92E3F5588994516470229F57F12AE3428A9ABD02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:5f:77:7e:9a:ae:6a:e1:48:93:23:f5:ff: 7d:a4:ce:77:26:3e:c3:79:9c:d8:cd:7f:d7:66:37: d3:48:d8:a9:11:5d:27:c3:64:0a:39:4e:d4:1b:dd: 24:0a:c6:e9:17:18:2a:03:67:97:ce:9c:2e:01:18: 48:af:57:77:f1:86:41:7c:c5:7c:57:3e:22:7d:b2: 51:2d:49:38:84:c4:6e:5f:4b:23:d5:72:86:9b:6c: a0:86:6a:6f:67:c2:6a:93:6a:63:69:2d:a9:42:2a: 64:53:9f:34:a3:b1:df:0a:e0:01:0a:bc:78:96:4f: 17:2f:5e:a7:91:05:ad:b9:1b:90:78:6d:40:33:de: 94:ad:59:cd:0e:c0:11:eb:dc:5f:40:94:c7:8d:16: 3c:bc:16:8d:f7:21:24:6d:e4:5b:8b:fb:83:6c:1e: 37:d3:2e:fc:16:61:ec:5f:3e:79:40:cb:12:a2:13: 58:31:41:f9:ca:05:88:6c:c2:7a:37:17:01:b3:71: e9:22:c5:0f:9c:de:16:72:40:dd:bf:d3:ef:3b:9e: 72:35:9d:22:70:1d:37:62:22:33:9c:89:df:ff:4e: d7:fd:5d:ac:d0:e6:4f:5a:a3:b3:45:66:20:ad:82: a6:9f:49:ef:93:10:73:9d:fa:09:e8:bc:d8:2f:62: e3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E3:F5:58:89:94:51:64:70:22:9F:57:F1:2A:E3:42:8A:9A:BD:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144977.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a917::/32 Signature Algorithm: sha256WithRSAEncryption 92:6e:28:4e:93:37:d9:d3:29:b9:0a:29:db:4a:f1:df:ea:d7: 99:c1:c1:8e:d0:77:1c:50:b4:93:72:d6:7f:17:cd:7c:14:d4: d7:e6:1c:09:ac:8e:3b:49:10:44:1b:7f:4a:25:c9:89:40:18: dc:9b:49:5e:6d:bc:2e:06:3d:d1:6f:73:d0:08:ef:dd:d3:2d: 1c:40:6a:ac:3b:b1:98:84:3b:6e:8b:99:7c:53:69:2e:68:c0: 83:04:15:ce:7b:99:70:bd:ae:04:01:e4:bc:38:d1:fc:30:01: c6:95:06:f5:a1:1d:cf:20:f6:a2:11:12:dc:ba:ee:c9:00:d2: e2:83:d7:42:8a:bf:7e:c1:04:3e:27:b2:dd:b2:a8:d5:f9:a2: 42:d8:52:f4:50:5e:ee:98:8e:e8:26:29:d4:29:98:12:1f:57: fb:9e:b6:e8:f9:d8:8e:5c:ad:75:e7:db:05:5f:90:f6:93:c3: c7:94:ae:e2:05:3c:cc:84:fe:d2:00:1f:53:dc:03:2e:29:b6: 3c:47:a1:a5:a3:21:f0:68:eb:42:2c:12:cb:02:65:dd:52:ef: 60:74:d5:01:25:03:08:cc:20:79:3d:0c:fe:68:fa:67:a0:eb: 8e:85:ee:90:20:31:64:ef:92:7d:9e:7b:4a:46:8c:7a:5f:14: 8d:84:41:5a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXchaQT48xD5rQLDXXsOg7o47nfgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxN1oX DTI3MDMwMzA2MjExN1owMzExMC8GA1UEAxMoOTJFM0Y1NTg4OTk0NTE2NDcwMjI5 RjU3RjEyQUUzNDI4QTlBQkQwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJqhX3d+mq5q4UiTI/X/faTOdyY+w3mc2M1/12Y300jYqRFdJ8NkCjlO1Bvd JArG6RcYKgNnl86cLgEYSK9Xd/GGQXzFfFc+In2yUS1JOITEbl9LI9VyhptsoIZq b2fCapNqY2ktqUIqZFOfNKOx3wrgAQq8eJZPFy9ep5EFrbkbkHhtQDPelK1ZzQ7A EevcX0CUx40WPLwWjfchJG3kW4v7g2weN9Mu/BZh7F8+eUDLEqITWDFB+coFiGzC ejcXAbNx6SLFD5zeFnJA3b/T7zuecjWdInAdN2IiM5yJ3/9O1/1drNDmT1qjs0Vm IK2Cpp9J75MQc536Cei82C9i47kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSS4/VY iZRRZHAin1fxKuNCipq9AjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qRcwDQYJKoZIhvcNAQELBQADggEBAJJuKE6TN9nTKbkKKdtK8d/q15nBwY7QdxxQ tJNy1n8XzXwU1NfmHAmsjjtJEEQbf0olyYlAGNybSV5tvC4GPdFvc9AI793TLRxA aqw7sZiEO26LmXxTaS5owIMEFc57mXC9rgQB5Lw40fwwAcaVBvWhHc8g9qIREty6 7skA0uKD10KKv37BBD4nst2yqNX5okLYUvRQXu6YjugmKdQpmBIfV/uetuj52I5c rXXn2wVfkPaTw8eUruIFPMyE/tIAH1PcAy4ptjxHoaWjIfBo60IsEssCZd1S72B0 1QElAwjMIHk9DP5o+meg646F7pAgMWTvkn2ee0pGjHpfFI2EQVo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:38 2026 by rpki-client